Just three months after the European Parliament voted to reject the EU's controversial chat control proposal, EU ambassadors agreed on Friday to push forward a temporary extension of the framework that allows platforms like WhatsApp and Messenger to scan users' private messages. The move is being described as unprecedented, a direct challenge to the democratic authority of the Parliament itself.

What is Chat Control? "Chat Control" is the nickname for a European Commission proposal requiring messaging platforms to scan private and encrypted communications for child sexual abuse material (CSAM). Critics argue it would amount to mass surveillance of 450 million people, undermine end-to-end encryption, and create infrastructure easily repurposed for broader censorship. The EU Parliament voted 311 to reject it in March 2026, but the Council is now attempting to override that result.

Parliament Said No. The Council Is Asking for a Do-Over.

In March 2026, the European Parliament voted by 311 lawmakers against prolonging the derogation that allowed platforms to voluntarily scan private communications. As a result, the legal basis for that voluntary scanning formally lapsed in April. The Parliament's rejection was considered the final word under standard EU legislative procedure.

The Cypriot presidency of the EU Council is now attempting something that has no clear precedent: pushing member states to adopt a first reading position at the Council level, effectively bypassing the Parliament's rejection and keeping the scanning framework alive through a procedural back door.

"Carefully consider adopting a first reading position by the Council, even if this would be without precedent in the present circumstances where the European Parliament has rejected the Commission's proposal." Cypriot EU Presidency note to member states

Privacy advocates and digital rights organizations have condemned the maneuver, arguing it treats the Parliament's democratic vote as an inconvenience to be routed around rather than a binding decision.

Error Rates, False Positives, and Legal Red Flags

The technical and legal case against mass message scanning has been building for years. A European Parliament study found no way to scan for CSAM without error rates high enough to sweep up large volumes of entirely lawful private communication.

Reported error rates for some of the detection tools under consideration run between 13 and 20 percent: meaning potentially tens of millions of innocent messages flagged per day across the EU's population. A German study found error rates approaching 50 percent for some tools. Meanwhile, the share of scanned content actually confirmed as genuine abuse material has been vanishingly small in every deployment studied.

The Council's own legal service has previously flagged the proposal as incompatible with the right to privacy under EU law: an unusual situation where the body pushing the legislation forward has been formally warned by its own lawyers that the proposal may be unlawful.

Error rate context: A false positive rate of even 1% applied to billions of daily messages across the EU would result in millions of innocent communications flagged and potentially reviewed by human moderators or reported to law enforcement every single day. At 13–20%, the scale of wrongful flagging becomes staggering.

Parliament President Backs the Council's Push, Against Her Own Group

The revival effort is being publicly championed by Roberta Metsola, President of the European Parliament, a striking position given that her own chamber rejected the proposal and her own political group, the center-right European People's Party, voted against it in the final tally.

At the European Council on June 18, Metsola urged EU leaders to drive the interim file forward regardless of the Parliament's earlier refusal, lending political cover to an effort that critics argue undermines the institution she is supposed to lead and protect.

A Two-Front Week for Private Communication in Europe

The Council's Friday move does not exist in isolation. It runs alongside negotiations on the permanent long-term CSAM regulation, the law formally known as chat control, whose negotiators are scheduled to meet again on Monday, June 30.

The permanent version of the law is where the stakes are highest for encryption. The worst-case version still on the table would allow governments to order detection across end-to-end encrypted services, the technology that ensures only the sender and recipient can read a message without limiting orders to specific suspects and without requiring prior judicial approval.

It would also pair mandatory scanning with compulsory age verification across hosting and communications services, meaning Europeans could eventually be required to prove their identity before being permitted to send a private message at all.

What's at stake on Monday: Negotiators on the permanent Chat Control regulation meet June 30. The version still in play could allow governments to demand scanning inside end-to-end encrypted apps without a court order, without limiting it to suspects, and bundled with mandatory identity verification. If adopted, it would effectively end private digital communication as it currently exists in the EU.

Why This Matters Beyond Europe

EU surveillance legislation rarely stays contained to European borders. When the EU creates a legal framework for scanning private messages, it sets a precedent that authoritarian governments around the world point to as justification for their own domestic surveillance systems. It also pressures non-EU companies serving European users to build scanning infrastructure that by its nature weakens encryption globally, since a backdoor for Brussels is technically also a backdoor for anyone else who can access the same system.

Signal, the encrypted messaging app, has consistently said it would rather exit the EU market entirely than undermine its encryption to comply with scanning mandates. WhatsApp and other major messaging platforms have made similar statements. If the permanent chat control law passes in a form that reaches into encrypted services, the result may be a fracturing of the messaging landscape, with private, encrypted communication effectively prohibited for EU residents under law.

The coming days represent one of the most significant moments for digital privacy in Europe in years. DigitalEscapeTools will update this article as Monday's negotiations conclude.

Sources

This article was written by DigitalEscapeTools based on publicly available reporting, official EU documents, and statements available at the time of publication.